| elastic |
Potential Process Herpaderping Attempt |
deprecated |
2023-12-15 |
| sigma |
Compress-Archive Cmdlet Execution |
test |
2023-12-15 |
| sigma |
Potential Recon Activity Via Nltest.EXE |
test |
2023-12-15 |
| sigma |
Disabled Volume Snapshots |
test |
2023-12-15 |
| sigma |
Suspicious Wordpad Outbound Connections |
test |
2023-12-15 |
| sigma |
Enable LM Hash Storage |
test |
2023-12-15 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page M1 2022-10-11 |
rev 2 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS DarkX Phish Landing Page 2022-01-22 |
rev 3 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS Successful DarkX Credential Phish 2022-12-19 |
rev 1 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS DarkX Phish Landing Page 2022-12-19 |
rev 3 |
2023-12-14 |
| suricata |
ET PHISHING DarkX Phish Landing Page 2022-01-22 |
rev 3 |
2023-12-14 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page M1 2022-10-11 |
rev 1 |
2023-12-14 |
| suricata |
ET PHISHING DarkX Phish Landing Page 2022-12-19 |
rev 3 |
2023-12-14 |
| elastic |
Malicious Remote File Creation |
deprecated |
2023-12-14 |
| sigma |
Change PowerShell Policies to an Insecure Level - PowerShell |
test |
2023-12-14 |
| sigma |
Potential PowerShell Execution Policy Tampering |
test |
2023-12-14 |
| snort |
ET TROJAN TA399/Sidewinder Maldoc Activity |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 19.0.x Detected |
rev 1 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.5.x Detected |
rev 12 |
2023-12-13 |
| snort |
ET TROJAN RedLine Stealer - CheckConnect Response |
rev 3 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 20.0.x Detected |
rev 1 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 9.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET TROJAN Suspected Kimsuky APT RevClient Related Activity |
rev 1 |
2023-12-13 |
| snort |
ET TROJAN Win32/StormKitty CnC Telegram Notification M2 |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 10.0.x Detected |
rev 5 |
2023-12-13 |
| snort |
ET TROJAN Win32/StormKitty CnC Telegram Notification M1 |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 13.0.x Detected |
rev 5 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 15.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 14.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.6.x Detected |
rev 53 |
2023-12-13 |
| snort |
ET TROJAN RaccoonStealer Admin Console Inbound |
rev 2 |
2023-12-13 |
| snort |
ET TROJAN Win32/LeftHook Stealer Browser Extension Config Inbound |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 16.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET INFO WebDAV Retrieving .zip containing .exe |
rev 1 |
2023-12-13 |
| snort |
ET INFO WebDAV Retrieving .zip |
rev 1 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.7.x Detected |
rev 62 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 18.0.x Detected |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 12.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.4.x Detected |
rev 11 |
2023-12-13 |
| snort |
ET WEB_CLIENT WebDAV Retrieving an .url |
rev 2 |
2023-12-13 |